Skip to content

Azure.Security.KeyVault.Keys_4.3.0

Choose a tag to compare

View all tags
@azure-sdk azure-sdk released this 26 Mar 01:33
Azure.Security.KeyVault.Keys_4.3.0
d0c1beb
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

4.3.0 (2022-03-24)

Changes from both the last release and the last beta include:

Features Added

  • Added Exportable and ReleasePolicy to CreateKeyOptions, ImportKeyOptions, and KeyProperties to support Secure Key Release for Key Vault and Managed HSM.

  • Added GetRandomBytes and GetRandomBytesAsync to KeyClient to get random bytes from a managed HSM.

  • Added JsonWebKeyConverter to support serializing and deserializing a JsonWebKey to a RFC 7517 JWK. (#16155)

  • Added KeyClient.GetCryptographyClient to get a CryptographyClient that uses the same options, policies, and pipeline as the KeyClient that created it. (#23786)

  • Added KeyReleasePolicy.Immutable property.

  • Added KeyRotationPolicy class and new methods including KeyClient.GetKeyRotationPolicy, KeyClient.RotateKey, and KeyClient.UpdateKeyRotationPolicy.

  • Added KeyVaultKeyIdentifier.TryCreate to parse key URIs without throwing an exception when invalid. (#23146)

  • Added ReleaseKey and ReleaseKeyAsync to KeyClient to release a key for Key Vault and Managed HSM.

  • Support multi-tenant authentication against Key Vault and Managed HSM when using Azure.Identity 1.5.0 or newer. (#18359)

  • Changed KeyRotationLifetimeAction.Action to read-only and added constructor to set the KeyRotationPolicyAction.

  • Renamed name parameter in GetKeyRotationPolicy and GetKeyRotationPolicyAsync to keyName.

  • Renamed name parameter in UpdateKeyRotationPolicy and UpdateKeyRotationPolicyAsync to keyName.

Bugs Fixed

  • The default service version is now "7.3".
  • Attempt to cache key locally from KeyClient.GetCryptographyClient. (#25254)
  • Added key version to distributed tracing. (#12907)

Breaking Changes

  • (Since 4.3.0-beta.7) KeyClient.ReleaseKey and ReleaseKeyAsync now take name and targetAttestationToken, or a ReleaseKeyOptions with a required name and targetAttestationToken along with additional properties.

Other Changes

  • KeyProperties.Version is no longer required when calling KeyClient.UpdateKeyProperties or UpdateKeyPropertiesAsync.
Assets 2
Loading